7.8

CVE-2025-38659: linux NULL Pointer Dereference

CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2025-38659DEBIAN-CVE-2025-38659
Published 22-08-2025Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2025-38659 is a high (CVSS 7.8) NULL Pointer Dereference vulnerability in linux. EPSS estimates a 0.17% chance of exploitation in the next 30 days, higher than 5.3% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.17%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 57 · Related 55
MGASA-2025-0234MGASA-2025-0235OPENSUSE-SU-2025:20081-1SUSE-SU-2025:03600-1SUSE-SU-2025:03601-1SUSE-SU-2025:03602-1

Timeline

  1. 22-08-2025
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: gfs2: No more self recovery When a node withdraws and it turns out that it is the only node that has the filesystem mounted, gfs2 currently tries to replay the local journal to bring the filesystem back into a consistent state. Not only is that a very bad idea, it has also never worked because gfs2_recover_func() will refuse to do anything during a withdraw. However, before even getting to this point, gfs2_recover_func() dereferences sdp->sd_jdesc->jd_inode. This was a use-after-free before commit 04133b607a78 ("gfs2: Prevent double iput for journal on error") and is a NULL pointer dereference since then. Simply get rid of self recovery to fix that.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.17%

Chance of exploitation in the next 30 days

Percentile

5%

Versus all other CVEs

30-day change

0.00 pp

From 0.17% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.17%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu136 products
  • linux< 5.15.0-186.196 | < 6.8.0-100.100
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.15.0-1112.119 | < 6.8.0-1046.49
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 601ef0d52e9617588fcff3df26953592f2eb44ac, < 69cf5699a402ee7ae1be53954dc2ae652c0a053c | ≥ 601ef0d52e9617588fcff3df26953592f2eb44ac, < 6ebe17b359bead383581f729e43f591c1c36e159 | ≥ 601ef0d52e9617588fcff3df26953592f2eb44ac, < 1a91ba12abef628b43cada87478328274d988e88 | ≥ 601ef0d52e9617588fcff3df26953592f2eb44ac, < f5426ffbec971a8f7346a57392d3a901bdee5a9b | ≥ 601ef0d52e9617588fcff3df26953592f2eb44ac, < 6784367b2f3cd7b89103de35764f37f152590dbd | ≥ 601ef0d52e9617588fcff3df26953592f2eb44ac, < 97c94c7dbddc34d353c83b541b3decabf98d04af | ≥ 601ef0d52e9617588fcff3df26953592f2eb44ac, < deb016c1669002e48c431d6fd32ea1c20ef41756 | 5.7
  • linux_kernel≥ 5.7, < 6.6.102 | ≥ 6.7, < 6.12.42 | ≥ 6.13, < 6.15.10 | ≥ 6.16, < 6.16.1
Debian1 product
  • linux< 6.1.170-1 | < 6.12.43-1 | < 6.16.3-1

3 vendors · 139 products

References

47 links
Show all 47 references